What we collect
We collect three kinds of information. You give us the first kind directly: name, email, phone number, delivery addresses, and — for sellers — business registration number, bank or mobile-money details, and government ID for verification. The second kind we generate as you use CaribHubs: orders, messages, reviews, saved items, support tickets, and payout history. The third kind your device reports automatically: IP address, browser and OS, approximate location from your IP, and the pages you open.
- —We do not collect your full card number. Payments are tokenised by our processor; we store only the last four digits and the card brand.
- —Precise GPS location will be collected only from a driver's device, and only while a driver-network delivery is in progress, once that service launches — never from the buyer's device.
- —If you join the waitlist for an island where CaribHubs has not opened, we keep your email address, the island, whether you want to buy or to sell there, and the Hub Journal page you signed up on, and use them only to tell you when CaribHubs opens on that island. Ask [email protected] to be taken off the list at any time.
Why we hold it
We process your data to operate the marketplace — completing checkout, routing deliveries to sellers, releasing payouts, and handling disputes. We also use it to detect fraud and account takeovers, to meet anti-money-laundering and tax obligations in the countries where we operate, and to improve the product. We rely on contract necessity for order processing, legal obligation for tax and AML records, and legitimate interest for fraud prevention and analytics.
Marketing and your choices
We send two categories of email. Transactional messages — order confirmations, delivery updates, payout notices, security alerts — are part of the service and cannot be switched off while your account is open. Marketing messages, including the weekly seller spotlight and seasonal campaigns, are opt-in at signup and can be turned off in Account settings → Notifications, or via the unsubscribe link in any message. We never sell your contact details to third parties.
Who we share with
When you place an order, the seller receives your name, delivery address, and order contents so they can fulfil it — sellers deliver their own orders at launch. Once the CaribHubs driver network launches, the assigned driver will receive your name, address, and phone number for the duration of that delivery only, and lose access once it is marked complete. Our payment processor and banking partners receive what they need to move money. We disclose data to regulators, tax authorities, or law enforcement only where legally compelled, and we tell you when we are permitted to.
- —We do not share buyer contact details with sellers for marketing purposes.
- —Sellers may not export buyer data from CaribHubs or add buyers to their own mailing lists. Doing so is grounds for removal.
Where your data lives
CaribHubs infrastructure runs in data centres in the United States and the European Union, with a regional cache in Trinidad. This means your data is transferred outside your country of residence. Where the destination has no adequacy decision, transfers are governed by Standard Contractual Clauses with our processors. Payment and identity data for AML purposes is additionally mirrored to the jurisdiction of incorporation as required by local financial regulation.
How long we keep it
Your profile, saved items, and messages remain until you close your account, after which they are deleted within 30 days. Order and payment records are retained for seven years from the transaction date to satisfy tax and anti-money-laundering law, even after account closure — these are held in restricted archival storage and are not used for any other purpose. Server logs are kept for 90 days. Support ticket transcripts are kept for two years.
Your rights
You can request a copy of everything we hold on you, correct anything inaccurate, export your data in a machine-readable format, or ask us to delete it. Buyers can do all four from Account settings → Privacy without contacting us. Sellers with open orders or unsettled payouts must resolve those before deletion. Where we cannot delete something because of a retention obligation, we tell you which record and which law requires it. Write to [email protected] if you would rather do it by email.
Children
CaribHubs is not directed at children and we do not knowingly collect data from anyone under 18. If we learn that an account belongs to a minor we close it and delete the associated data. If you believe a child has given us information, contact [email protected] and we will act within 72 hours.
Changes and contact
We update this policy as the product changes. Minor edits are published here with a revised date. Material changes — a new category of data, a new class of recipient, a new purpose — are notified by email at least 30 days before they take effect, and continued use after that date constitutes acceptance. Our Data Protection Officer can be reached at [email protected] or by post at the registered address in the footer of this page.